CVE-2026-12097
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
The User Management plugin for WordPress up to version 1.2 inclusive contains an authorization bypass vulnerability. Unauthenticated attackers can modify the export field configuration stored in the uiewp_export_field option, controlling which user fields (e.g., password hashes) are included in CSV exports and how columns are mapped during imports.
Risk Assessment
The risk involves potential leakage of sensitive user data, including password hashes, through manipulated CSV exports. This could lead to account compromise and further attacks on the organization.
Recommendation
Immediately update the User Management plugin to the latest available version that fixes this vulnerability. If no update is available, temporarily disable the plugin or apply WAF rules to block unauthorized requests to export endpoints.
Original NVD description (English source)
The User Management plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the plugin's export field configuration stored in the uiewp_export_field option, controlling which user fields such as password hashes are included in CSV exports and how columns are mapped during imports.